Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1-yjzTV6S9f6StVQLDuOHKZRwr94.roa
File: 1-yjzTV6S9f6StVQLDuOHKZRwr94.roa (raw, json)
Hash identifier: S2VpLod5HzSB3pALrS6WB7Y0GaktiyvVtjiwytj7UWU=
Subject key identifier: FB:28:F3:4D:5E:92:F5:FE:92:B5:54:0B:0E:E3:87:29:94:70:AF:DE
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01956761072D1C5D9932E7FEE4E266685242
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1-yjzTV6S9f6StVQLDuOHKZRwr94.roa
Signing time: Wed 05 Mar 2025 17:36:06 +0000
ROA not before: Wed 05 Mar 2025 17:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 80.246.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:61:07:2d:1c:5d:99:32:e7:fe:e4:e2:66:68:52:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Mar 5 17:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb28f34d5e92f5fe92b5540b0ee387299470afde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:08:56:62:cb:7b:d0:b0:9b:4c:14:6b:4d:
69:a1:df:2d:e6:a6:7c:f3:bb:4e:2c:e4:53:59:44:
eb:b6:d5:a1:11:07:27:10:bf:35:96:e3:6a:bf:69:
52:e0:81:61:e3:eb:0a:30:ad:4d:14:3b:44:90:11:
c9:c3:a3:b4:c1:d5:9c:45:ab:1e:73:8b:ef:d4:d3:
77:93:1e:24:26:ad:64:60:ab:8d:a0:2c:89:28:f9:
23:1b:94:77:0d:73:e7:7c:bb:45:74:2f:05:a1:6b:
c7:1e:fc:64:e1:49:c2:0c:15:83:50:07:04:4f:fe:
ce:0f:c3:61:4d:d4:77:dd:2c:08:10:7b:29:fd:21:
03:70:09:5f:b7:14:65:fe:dc:6e:4a:1c:b5:8a:ce:
8f:69:9a:d9:84:44:c7:a7:4a:09:98:a8:cf:d7:b8:
76:1e:a9:dc:4b:8b:f3:8d:51:74:c0:77:25:39:18:
89:dc:26:95:e7:a6:ae:7a:bf:b7:64:53:a1:a5:73:
d1:9f:a0:23:f7:51:73:c0:26:29:ac:bb:cf:71:12:
5b:70:44:46:a4:a8:41:54:b5:e7:dc:a0:bf:3c:26:
3e:0e:ac:d3:bd:59:e5:13:e9:84:2f:07:ec:67:6d:
90:e2:3b:ab:1d:25:1c:e4:8e:ee:b5:83:af:9a:3a:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:28:F3:4D:5E:92:F5:FE:92:B5:54:0B:0E:E3:87:29:94:70:AF:DE
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1-yjzTV6S9f6StVQLDuOHKZRwr94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
75:7e:7f:89:08:99:8a:3b:9c:e8:bd:20:d7:cf:13:13:b5:4d:
44:3f:30:21:8e:af:8d:f7:3a:c8:2b:e9:01:2c:b9:fa:60:34:
02:94:0c:67:05:b3:42:44:76:e2:12:f1:2f:a1:e8:d4:aa:69:
d6:e9:bd:6a:88:6f:5e:92:69:a7:b7:19:65:c1:6f:9f:ed:60:
72:1e:7c:d8:1e:8e:1a:e7:64:54:eb:67:4c:32:bb:ac:b4:8a:
c7:28:d6:48:9b:86:ef:bd:a5:d8:1b:cb:42:6f:37:aa:ea:50:
ba:a1:91:17:51:02:8a:1b:42:40:de:1b:a6:e1:6c:20:af:a4:
c6:2e:42:81:72:8c:6a:5b:cc:60:36:b3:69:2b:a7:d4:45:30:
a9:7d:38:65:d2:56:47:14:ec:ad:31:dd:b2:79:aa:91:6f:90:
11:cb:1b:42:af:d3:69:a5:ed:14:06:14:6e:5d:0d:fc:82:90:
c2:ea:46:45:9a:f9:a1:23:39:e8:69:fa:1f:d0:11:df:b2:1c:
a7:85:61:ee:4a:78:93:3d:c3:e6:ac:9c:97:65:2d:ec:0c:c6:
dd:bc:cf:10:a2:33:3e:6a:83:bd:ec:35:e9:5a:af:04:24:0f:
1e:67:f0:c9:4c:37:0b:e1:cb:81:3c:b0:17:d0:e2:a3:b5:1f:
14:5c:bc:27
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZVnYQctHF2ZMuf+5OJmaFJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjUwMzA1MTczNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjI4ZjM0ZDVlOTJmNWZlOTJiNTU0MGIwZWUzODcyOTk0NzBhZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00gIVmLLe9Cwm0wUa01pod8t5qZ8
87tOLORTWUTrttWhEQcnEL81luNqv2lS4IFh4+sKMK1NFDtEkBHJw6O0wdWcRase
c4vv1NN3kx4kJq1kYKuNoCyJKPkjG5R3DXPnfLtFdC8FoWvHHvxk4UnCDBWDUAcE
T/7OD8NhTdR33SwIEHsp/SEDcAlftxRl/txuShy1is6PaZrZhETHp0oJmKjP17h2
HqncS4vzjVF0wHclORiJ3CaV56auer+3ZFOhpXPRn6Aj91FzwCYprLvPcRJbcERG
pKhBVLXn3KC/PCY+DqzTvVnlE+mELwfsZ22Q4jurHSUc5I7utYOvmjrwmwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPso801ekvX+krVUCw7jhymUcK/eMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvMS15anpUVjZTOWY2U3RWUUxEdU9IS1pSd3I5NC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYWYvOThlMTEzLWUwMDItNGQ5My05YTQ5LWFkZWFkZTI4NjVj
MS8xLzFXTjJrdjljUlVodEVGT3hTZHdVSUFKczF6TS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1D26DAN
BgkqhkiG9w0BAQsFAAOCAQEAdX5/iQiZijuc6L0g188TE7VNRD8wIY6vjfc6yCvp
ASy5+mA0ApQMZwWzQkR24hLxL6Ho1Kpp1um9aohvXpJpp7cZZcFvn+1gch582B6O
GudkVOtnTDK7rLSKxyjWSJuG772l2BvLQm83qupQuqGRF1ECihtCQN4bpuFsIK+k
xi5CgXKMalvMYDazaSun1EUwqX04ZdJWRxTsrTHdsnmqkW+QEcsbQq/TaaXtFAYU
bl0N/IKQwupGRZr5oSM56Gn6H9AR37Icp4Vh7kp4kz3D5qycl2Ut7AzG3bzPEKIz
PmqDvew16VqvBCQPHmfwyUw3C+HLgTywF9Dio7UfFFy8Jw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:40 2025 by rpki-client